The Electronic Reading Room ARP Virus Detection And Localization System Research

Along with the computer technology and the development of network technology,the process of informatization in colleges and universities have gradually deepened A kind of modern multi-functional reading room-Electronic Reading Room has become an indispensable important department in library. As a new kind of information service, the electronic reading rom is constituted of electronic literature (such as disk, CD, network information, etc.) based on computer technology and network communication technology. However, as an information service based on computer network technology,Electronic Reading Room have to face a very serious problem,that is the problem of network security. The ARP virus is the most common kind of network attack virus in Electronic Reading Room. The virus can cause the network frequently dropped calls, IP address conflicts, and even paralysis of the entire network. By using some ARP virus prevention software will inhibite the impact of ARP virus to some extent, but it can not completely remove the ARP attack source. Therefore, how to locate the ARP attack source is the key to the elimination of ARP virus. Both at home and abroad have not yet have a kind of special effective method can detection and localization ARP virus.The thesis analyzes the ARP protocol and its working principle, studies the principle of ARP virus spoofing, and summarizes the common spoofing methods of ARP virus. At last, for specific environment of Electronic Reading Room in Yulin Institute. a method of ARP virus detection and location is proposed, which is based on WinPcap packet capture.The proposed method in the thesis was tested in the Electronic Reading Room of unversity and has achieved the desired results. The method has prevented the hazards of ARP virus on the Electronic Reading Room, improved the network security.